Re: Should we say anything on security? from Mike Sokolov on 2012-09-12 (public-microxml@w3.org from September 2012)

From: Mike Sokolov <sokolov@falutin.net>
Date: Wed, 12 Sep 2012 09:41:06 -0400
To: Uche Ogbuji <uche@ogbuji.net>
Cc: public-microxml@w3.org
Message-id: <505090F2.10303@falutin.net>

On 09/12/2012 09:33 AM, Uche Ogbuji wrote:
> I think this is the way almost every implementor has interpreted it as 
> well.  Some, such as libxml will take advantage of the "in a normal 
> way" clause to at least try to show the user any further fatal errors 
> beyond the first, to make fix-up a bit less painful, but yeah that 
> hardly counts as liberal acceptance, and anyway most parsers do stop 
> dead at the first fatal error.
>
>
Not completely - MarkLogic for example, provides "fixup" capabilities in 
its parser that include undeclared ISO xml entity handling, and I think 
will even fix well-formedness problems a-la tidy.

-Mike

Received on Wednesday, 12 September 2012 13:41:56 UTC